NekoSakura/android_device_mediatek_sepolicy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
1,032 Commits 2 Branches 0 Tags
Commit Graph

981 Commits

Author SHA1 Message Date
GW Chen
c04d8c0283 Merge "[ALPS04421300] HIDL refining" into alps-trunk-q0.basic 
Change-Id: I8ecab5601ac1a7d6e94406cbd1868b5f6555dd15
MTK-Commit-Id: bcea8f14cfb619d4c4082bd3b4d27c1f32a72321
 2020-01-18 10:13:50 +08:00
mtk16965
314a88d69a [ALPS04421300] HIDL refining 
[Detail]
fix some error of HIDL

MTK-Commit-Id: c4b3c65a31fa7e181cd67064123a338e958ad066

Change-Id: Ic512b22308d788267c2e0049cc119b8ec506ed91
CR-Id: ALPS04421300
Feature: OpenGL|ES
 2020-01-18 10:13:49 +08:00
guanglai guo
6a377f89f8 [ALPS04579367] selinux: change bootprof target context 
change bootprof target context from proc to proc_bootprof,
for fixing bootprof caused permission issue.

MTK-Commit-Id: ea15ac71efba2703e15022ac79344c5cc2c93520

Change-Id: I1031f33200306ecb2edcf8c8c8fe7d1afa79b5ad
Signed-off-by: guanglai guo <guanglai.guo@mediatek.com>
CR-Id: ALPS04579367
Feature: Modem Interface Driver
(cherry picked from commit f6f909a3ecfa41b1633769f83282ffd9e2487937)
 2020-01-18 10:13:48 +08:00
Qian Dong
cb1094e975 Merge "[ALPS04577521] remove ro.vendor.mtk_wmv_playback_support property" into alps-trunk-q0.basic 
Change-Id: I8954fa076a07fda6e6c60d8af769142e4f2e5092
MTK-Commit-Id: 3f108f6389ae686aeea3af05a452aef5dc398386
 2020-01-18 10:13:47 +08:00
Yuxiu Zhang
db6b8b4297 [ALPS04577521] remove ro.vendor.mtk_wmv_playback_support property 
AP(MediaFile.java) do not need it from Android Q

MTK-Commit-Id: 796885860cf7c950e2ac5ebc4e0b3ee6996171c0

Change-Id: I7ca0d4827a88118e84b7c33687b1e7ca6897a185
CR-Id: ALPS04577521
Feature: ASF Playback
 2020-01-18 10:13:45 +08:00
zhiyong.wang
0f9a4e559f [ALPS04474673] allow vendor init write expdb 
[   34.641681] <0>.(7)[346:logd.auditd]type=1400
audit(1558666535.652:116): avc: denied { read write } for comm="init"
name="mmcblk0p4" dev="tmpfs" ino=14428 scontext=u:r:vendor_init:s0
tcontext=u:object_r:expdb_block_device:s0 tclass=blk_file permissive=0

allow vendor init write into expdb partition.

MTK-Commit-Id: f46025981c46c95f7cc42a3c1380cf71b686d1e6

Change-Id: I573ed127c93cd84d49042ae5671b19ca967dd2e1
CR-Id: ALPS04474673
Feature: Android Exception Engine(AEE)
 2020-01-18 10:13:41 +08:00
jhua.zhang
c95ef58ba5 [ALPS04533784] Thermal: add sepolicy for cam cooler 
[Detail]
Add sepolicy to allow camera app to access /proc/driver/cl_cam_status
for camera shutdown cooler.

MTK-Commit-Id: 869396b2725b78c55382a9f34b016b5236505965

Change-Id: Iadfcfb95923c15384c7a6508525b7167e1a6e16f
Signed-off-by: jhua.zhang <jhua.zhang@mediatek.com>
CR-Id: ALPS04533784
Feature: Thermal Management
 2020-01-18 10:13:40 +08:00
Yuhui Zhang
e11759c46c Merge "[ALPS04325771] [EM] power: search subpmic register" into alps-trunk-q0.basic 
Change-Id: I2457dcce47210ae66566ab1b551bcc2086d71f1a
MTK-Commit-Id: 9b8f930c6c741de7eb59cf0ce606817917721193
 2020-01-18 10:13:40 +08:00
Juan Rong
50e9eaca5b [ALPS04325771] [EM] power: search subpmic register 
EM need search subpmic register file

MTK-Commit-Id: bdbeb20b46586062dbeaa4337487b0780ded4429

Change-Id: I210c153ea810908d9aaa148fc231d4e2635c2665
CR-Id: ALPS04325771
Feature: Engineering Mode
 2020-01-18 10:13:38 +08:00
Yongjun Luo
dfc26f2e82 Merge "[ALPS04525727] SEPolicy:add perm for system_server" into alps-trunk-q0.basic 
Change-Id: I962cc508a89f9263f41f4578a4fb7e3be45fd794
MTK-Commit-Id: 2d624def2223c4cbb8ad095636b55eb509f1bb92
 2020-01-18 10:13:36 +08:00
mtk07742
a07397dc56 [ALPS04525727] SEPolicy:add perm for system_server 
For Android Q, there is a more stringent restriction for ioctl,
system_server need some permission to access proc_ged by ioctlcmd
in MTBF.

MTK-Commit-Id: d79045e8bfe072a3125efa56cf5012cfb84e416b

Change-Id: Ic82c4ff92333077d9260f931c67453b9e53d305e
CR-Id: ALPS04525727
Feature: [Module]SystemServer
 2020-01-18 10:13:34 +08:00
Ian-Y Chen (陳尹)
1e6a5072dc Merge "[ALPS04328846] power: refine sepolicy" into alps-trunk-q0.basic 
Change-Id: Iaf3710c91ea35b6019f6f969b78854f28bc3dcf8
MTK-Commit-Id: c0705d2f416d71357824bbea7d70237068f7b921
 2020-01-18 10:13:33 +08:00
Ian-Y Chen
9fcf99ba09 [ALPS04328846] power: refine sepolicy 
[Detail]
1. Add prefix PERFMGR for performance related ioctl
2. Add property permission for PowerHAL

MTK-Commit-Id: 91ef99a47ee2de3c48426298c9a67d5e4dd10a6b

Change-Id: I5979aefc7fb110ee540425bc53896babdcac08bd
CR-Id: ALPS04328846
Feature: [Module]PowerHAL
 2020-01-18 10:13:32 +08:00
Johnny Yao
b05b2ccb3d Merge "[ALPS04294481] WMT: add sepolicy for wmt_dbg" into alps-trunk-q0.basic 
Change-Id: Iae9b6e7f67f5243bf01511e827eb65a0afc10f7f
MTK-Commit-Id: 25881f143852f7ccc0b35330ef4e8e02a5625b48
 2020-01-18 10:13:30 +08:00
Tim Chang
a02af82882 [ALPS04294481] WMT: add sepolicy for wmt_dbg 
Add a rule to allow vendor_init have write permission
to proc_wmtdbg.

MTK-Commit-Id: fcdffbb167f1e860b31027357c5249c99b4b0281

Change-Id: I7b74e284ce9d9de1400c59bbf1f3e11188ec5245
Signed-off-by: Tim Chang <tim.chang@mediatek.com>
CR-Id: ALPS04294481
Feature: [Module]WMT Driver
 2020-01-18 10:13:25 +08:00
mtk11285
a250fc423c [ALPS03806577] catch manual coredump fail 
add some rules for aee_aedv/aee_aed to read /proc/*/exe

MTK-Commit-Id: a1ee357e85a32beded54046bb1b638eb8fe4b3c9

Change-Id: Ideeb8002a9d1b9b166709442195124cce8e4e427
CR-Id: ALPS03806577
Feature: Android Exception Engine(AEE)
 2020-01-18 10:13:24 +08:00
James Hsu
61b25561f6 [ALPS04515390] mrdump: add sepolicy for mrdump partition 
[Detail]
Add sepolicy for aee access mrdump partition

error log:
mrdump partition /dev/block/platform/bootdevice/by-name/mrdump
 open failed (13), Permission denied

MTK-Commit-Id: f837dec83ec395bddca7806ef5ff2d35ed2f8f7a

Change-Id: Iad2414cdebb66cc3b7046fbe2570ea972101854a
Signed-off-by: James Hsu <james.hsu@mediatek.com>
CR-Id: ALPS04515390
Feature: Memory RAM Dump (MRDUMP)
 2020-01-18 10:13:21 +08:00
Shanshan Guo
7010a1c7bd [ALPS04501651] Sepolicy: Kernel API dump 
[Detail]
For Andorid Q, there is a more stringent restriction
for ioctl, app need to access proc_ged by ioctlcmds.

[Solution]
Add sepolicy for app to access proc_ged by ioctlcmds.

MTK-Commit-Id: 630cfe13e5928346453bb3800b75439d5e9e1235

Change-Id: I1bde81017e78d5b70fc78dd5fa148667360d2af4
CR-Id: ALPS04501651
Feature: Power Management
 2020-01-18 10:13:20 +08:00
Gang Wei
edfe850621 Merge "[ALPS04418515] [META]change to vendor_de" into alps-trunk-q0.basic 
Change-Id: I09eb4d1e2169689537356c598026813fdb0e592c
MTK-Commit-Id: 5b5870298b5f9daca992d6b2ca738fa6d6bc5316
 2020-01-18 10:13:20 +08:00
jing.li
2286610683 [ALPS04418515] [META]change to vendor_de 
[META]
Change /data/vendor to /data/vendor_de

MTK-Commit-Id: 4f8a9f9adadd9c32da5d6f781553b4256fec9c38

Change-Id: I3cee972d9d19eafc6bfe465df5229eff584d9ea6
CR-Id: ALPS04418515
Feature: SP META Tool
 2020-01-18 10:13:18 +08:00
Juju Sung
f680189e6c [ALPS04284125] Sepolicy: add lost label 
[Detail]
netd_socket is deprecated in a/26f84c6.
The netd_socket used in mulitple modem generation,
for cross modem compatibility we add a dummy label to
prevent splitting new branch.

MTK-Commit-Id: b949378b387f9eb942de90b7475aea4ec711f68c

Change-Id: I5179175d9df973a0da01d4520269468b70f742ce
CR-Id: ALPS04284125
Feature: Modem Interface Driver
 2020-01-18 10:13:13 +08:00
Marc Huang
9581c04e51 Merge "[ALPS04501667] SELINUX: Kernel API dump of GED access" into alps-trunk-q0.basic 
Change-Id: If901823ae54b939e2608145cdecae627551434e7
MTK-Commit-Id: 255dcf4dab6d5987452adacdb3b09150d99e98e0
 2020-01-18 10:13:12 +08:00
Figo Wang
15fe055c40 [ALPS04501667] SELINUX: Kernel API dump of GED access 
Add sepolicy to resolve the kernel api dump.

MTK-Commit-Id: 471082eb801521fcba7cb9a2dc9105e9832047b7

Change-Id: Ica2001bcb4c998f2cdb2cba26f5351ea72c65153
Signed-off-by: Figo Wang <figo.wang@mediatek.com>
CR-Id: ALPS04501667
Feature: Power Management
 2020-01-18 10:13:09 +08:00
Wy Chuang
509a95b365 Merge "[ALPS04431500] battery: add selinux policy in em_svr" into alps-trunk-q0.basic 
Change-Id: I1dd23be2b709812426a1d85e673d4b751fe9af82
MTK-Commit-Id: 3c6fefaadbbd74b2374e6ceb52253e59e1d1164d
 2020-01-18 10:13:07 +08:00
Timo Liao
7bb01a1e2e [ALPS04431500] battery: add selinux policy in em_svr 
add new labels for em_svr mode

MTK-Commit-Id: a0e12cdf7848d47c065cc10eeb144a929dcccace

Change-Id: Ic198120736d63e4b8d1615092b39ba26269c0518
Signed-off-by: Timo Liao <timo.liao@mediatek.com>
CR-Id: ALPS04431500
Feature: Fuel Gauge
 2020-01-18 10:13:04 +08:00
Cheng Li
414a5bfec1 [ALPS04468274] add cameraservice ioctrol permission 
[Detail]
add cameraserver permission

[Solution]

MTK-Commit-Id: 23fe7f9ba48f0ff2d27acf666670c1d4dba69a6e

Change-Id: Ie4b9aa9cd836a3c96a353a8148e5ada5d21166f8
CR-Id: ALPS04468274
Feature: [Android Default] Camera Application Basic Functions
 2020-01-18 10:13:00 +08:00
Chinwen Chang
2c81327460 Merge "[ALPS04455690] Whitelist some lmkd properties that go into /vendor/build.prop" into alps-trunk-q0.basic 
Change-Id: I9dd7a3f87f7aca104d8e0da549f6943f9a6ad1c5
MTK-Commit-Id: 9db1544dd83a52d62cdf2e6b96da42048a2e8320
 2020-01-18 10:13:00 +08:00
Chinwen Chang
3203c8f38a [ALPS04455690] Whitelist some lmkd properties that go into /vendor/build.prop 
Add whitelist for the following properties,
      ro.lmk.use_minfree_levels
      ro.lmk.low
      ro.lmk.medium
      ro.lmk.critical
      ro.lmk.kill_timeout_ms
      ro.lmk.swap_free_low_percentage

This is just a temp solution because those properties should be
put in system/sepolicy/public/property_contexts, but it is not
ready currently. Once it is ready for those properties, this
patch will be rolled back.

MTK-Commit-Id: bc8b76b56605d264af1727cd234a5406da372744

Change-Id: Id8db6725e9dfeeeebd401c8922fe8004c5f5c5b4
CR-Id: ALPS04455690
Feature: Memory Optimization
 2020-01-18 10:12:59 +08:00
Peter Wang
33a714e910 Merge "[ALPS04428820] MSDC : Add selinux allow sysfs_boot_type access" into alps-trunk-q0.basic 
Change-Id: I9abe1d290dd34eabb28498652bc047bf1107f7de
MTK-Commit-Id: d19ca49eb1e8d6d6c6935ccf0689f68f1a92350f
 2020-01-18 10:12:57 +08:00
Peter Wang
08d19098f9 [ALPS04428820] MSDC : Add selinux allow sysfs_boot_type access 
Add selinux allow sysfs_boot_type access

MTK-Commit-Id: ba46272a27487f42748fb590e7793c3a21cb9d6e

Change-Id: Ib8f2d6dfe11720b545b4c4665489e50e7eb77ec5
CR-Id: ALPS04428820
Feature: SP META Tool
(cherry picked from commit d24a639fffad5f36315f3dcc95b04543e7c5e56d)
 2020-01-18 10:12:56 +08:00
Archilis Wang
9d48113003 Merge "[ALPS04418703] Add mnt_vendor_file permission" into alps-trunk-q0.basic 
Change-Id: Ia6cbace12725310eb8d3309bfb76f5ef82ed6b6b
MTK-Commit-Id: 33198a2107ed4b998a140af912bfb0ff899c8a09
 2020-01-18 10:12:55 +08:00
Archilis Wang
4df84f7fa4 [ALPS04418703] Add mnt_vendor_file permission 
mtk_agpsd needs to save some data in mnt_vendor

MTK-Commit-Id: 9a16e787248a3b6e07dea75bdeee2428ef8ceb2c

Change-Id: I55715e48c3c56e700725cc223ac08f753433cd5d
CR-Id: ALPS04418703
Feature: A-GPS
 2020-01-18 10:12:53 +08:00
chia-mao.hung
3273c74f52 Merge "[ALPS04428497] mdp: MMS HIDL for pq version" into alps-trunk-q0.basic 
Change-Id: If56f4cc71d1e9bbe0830994e37b3105eb785dfd3
MTK-Commit-Id: cbb1868ed74b02f2ee3858e80636f56710db02dd
 2020-01-18 10:12:52 +08:00
Eve
38c772248f [ALPS04428497] mdp: MMS HIDL for pq version 
add pq control for jpeg usage

MTK-Commit-Id: fa4d43a6005c174326f4bea2bdc244a03ac0fc0e

Change-Id: Ia996efb0fcca703514a39fc1a3c1eb2d72e1c1f9
CR-Id: ALPS04428497
Feature: [Module]MDP Driver
 2020-01-18 10:12:50 +08:00
mtk07742
b110192c83 [ALPS04462320] SEPolicy:add perm for system_server 
For Android Q, there is a more stringent restriction for ioctl,
system_server need some permission to access proc_ged by ioctlcmd
in MTBF.

MTK-Commit-Id: 6fe037cc18f278a95a919bb3188ae50fb880a36e

Change-Id: I4f4a3b13f3ee49920ebb588ed5e7094ae0065494
CR-Id: ALPS04462320
Feature: [Module]SystemServer
 2020-01-18 10:12:48 +08:00
mtk07406
210222b8d4 [ALPS04431046] GPU: Enable SPHAL for OpenCL 
[Detail]
Same process hal modification

MTK-Commit-Id: 54746202d1051616f8d4e65c13d516063899040f

Change-Id: I31873741ce1a25106552d3cc83b22ef866f49433
CR-Id: ALPS04431046
Feature: OpenGL|ES
(cherry picked from commit 53d59eca15de0fdfc5ab1eb6e7ebe45a8dc9ba91)
 2020-01-18 10:12:48 +08:00
mtk07742
734b5286a2 [ALPS04462320] SEPolicy:add perm for system_server 
For Android Q, there is a more stringent restriction for ioctl,

system_server need some permission to access proc_ged by ioctlcmd

in MTBF.

MTK-Commit-Id: b3250e2378854b801fd8602b5369b48d91268993

Change-Id: I46d46e62dfb7fcc8a5675cc7584fd8f8e069238f
CR-Id: ALPS04462320
Feature: [Module]SystemServer
 2020-01-18 10:12:48 +08:00
CS Kuo
eb08f2a396 Merge "[ALPS04423688] wlan: Remove unused codes" into alps-trunk-q0.basic 
Change-Id: Ia3e34fd228cd128ad4a3ef87193247b6be0b801f
MTK-Commit-Id: 8a96380238e2fedda0e0aae51aaadd26835f8ce7
 2020-01-18 10:12:47 +08:00
Ben Lai
014e70be61 [ALPS04423688] wlan: Remove unused codes 
Remove unused codes for hotspot.

MTK-Commit-Id: 8fb09c8c6cb3d9362ae657285dd81f8648e2b271

Change-Id: Idcf2f7359dfb324028a752d8fe3824e0caa93862
CR-Id: ALPS04423688
Feature: Wi-Fi Tethering
Signed-off-by: Ben Lai <ben.lai@mediatek.com>
 2020-01-18 10:12:45 +08:00
Code Lin
1cdd0f7bd4 Merge "[ALPS04431920] NP: Add MDLA device SEPolicy" into alps-trunk-q0.basic 
Change-Id: Idc43193e6f45c35ef3f4799a1500a9b17c3a503f
MTK-Commit-Id: 7e30f1dccea206f80e4a6ac957e1752565777ac1
 2020-01-18 10:12:44 +08:00
Code Lin
da52ff0805 [ALPS04431920] NP: Add MDLA device SEPolicy 
Add MDLA device SEPolicy.

MTK-Commit-Id: 097bfbf9de8c3c8760f436ca8f1964037c4ab7f6

Change-Id: Ie4aaab4fc28eb1daf0d6c88cbe4e86f0f59444af
CR-Id: ALPS04431920
Feature: NeuroPilot
 2020-01-18 10:12:37 +08:00
YL Wang
814f844b6e Merge "[ALPS04455064] WMT: Setting SEPolicy for coredump mode property" into alps-trunk-q0.basic 
Change-Id: Ib7843e3e6f8ee4cf0a06ce238f0c397c0c0bf11f
MTK-Commit-Id: c589e02628f2793cfbf4f889993fddba582d8082
 2020-01-18 10:12:35 +08:00
Robbin Chiu
0fc812491c [ALPS04455064] WMT: Setting SEPolicy for coredump mode property 
[Solution]
Set SEPolicy for vendor_init to set property

MTK-Commit-Id: d72a1df1f6ef596f306cc5268bd27ed1216eb9a4

Change-Id: Ie6016a873e251e224b8225797ff3451a3ccd2ac9
Signed-off-by: Robbin Chiu <robbin.chiu@mediatek.com>
CR-Id: ALPS04455064
Feature: [Module]WMT Driver
 2020-01-18 10:12:34 +08:00
Zhongchao Xia
bed757c9c8 Merge "[ALPS04382560] MDP: open mdp device fail" into alps-trunk-q0.basic 
Change-Id: I32eb257de568b42ee3405d57bfeb1407addc0836
MTK-Commit-Id: 4c9bdb05011d86bf33434ada19b957201cfe69a2
 2020-01-18 10:12:33 +08:00
Zhongchao Xia
379de5a9b0 [ALPS04382560] MDP: open mdp device fail 
[Detail]
1. Change /proc/mdp/device to /dev/mdp_device
2. Modify kernel driver change device node
3. Modify init.rc change device owner
4. Add selinux policy

MTK-Commit-Id: 08cf6d6ee97647a5f1262f475b79b420b616e527

Change-Id: I2bd7ee983116294dd62f247a9d30a67655316bd8
CR-Id: ALPS04382560
Feature: [Module]MDP Driver
 2020-01-18 10:12:32 +08:00
Rajkamal R
8b8627c31a Merge "[ALPS04340640] BootAnimation SELinux policy changes" into alps-trunk-q0.basic 
Change-Id: Ic4a6d637dc717d4b947c8852d33f00cad0c6eb19
MTK-Commit-Id: 7c3ff3d20f67920bc896748643b2468200433f47
 2020-01-18 10:12:30 +08:00
lokesh
a4175cc0e4 [ALPS04340640] BootAnimation SELinux policy changes 
Update SELinux policy of bootanimation

MTK-Commit-Id: f97c66dacfd9766f692e753f3aaae1faba66591c

Change-Id: I5f6a5cf18be6430b2365588917d45278140df696
CR-Id: ALPS04340640
Feature: [Module]Settings
 2020-01-18 10:12:28 +08:00
Shanshan Guo
4c048b9055 Merge "[ALPS04449311] SEPlolicy: for app to access ged by ioctlcmd" into alps-trunk-q0.basic 
Change-Id: Ia283db06b79ae3252a13a674109fb86fa9c27b6f
MTK-Commit-Id: 1fa276d7dd8e8d6fd850582d85240f3a9e253b30
 2020-01-18 10:12:27 +08:00
Shanshan Guo
552d39bdd1 [ALPS04449311] SEPlolicy: for app to access ged by ioctlcmd 
[Detail]
For Andorid Q, there is a more stringent restriction for ioctl,
app need some permissions to access proc_ged by ioctlcmd.

[Solution]
Add sepolicy for app to access proc_ged by
ioctlcmd=GED_BRIDGE_IO_BOOST_GPU_FREQ.

MTK-Commit-Id: 1d7bd0172f33336abcc94349978bbbd008f5fe9d

Change-Id: I62f422f072dc0881ea4c9f082a4c548b7164d58d
CR-Id: ALPS04449311
Feature: Power Management
 2020-01-18 10:12:25 +08:00
Jason Su
e1868bca08 Merge "[ALPS04414889] GNSS HIDL 2.0 feature support" into alps-trunk-q0.basic 
Change-Id: If79d0dcd54fcd6d043d2b2b48209be393849b420
MTK-Commit-Id: f25092a07205872b985fb8fe954cc2a06faf93b1
 2020-01-18 10:12:24 +08:00